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METHOD AND CIRCUIT ARRANGEMENT FOR OPERATING A SOLENOID 
ACTUATOR 

Technical Field 

[0001] The present invention relates to both a method and a circuit arrangement for 
operating an electromagnetic operating mechanism which is formed by a magnet yoke, at 
least one permanent magnet disposed on the side of the magnet yoke, an armature, and 
retaining means exerting a retaining force, further include electromagnetic coil means 
surrounding the magnet yoke, a control circuit supplied with a rectified control voltage 
applied to its input and containing a microcontroller, and a capacitive charge storage device. 
Upon application of the control voltage, the armature is attracted against the retaining force, 
assisted by permanent-magnet action, then held exclusively by permanent-magnet action 
while the control voltage remains applied, and when the control voltage is removed, the 
armature drops out with the assistance of the retaining force and against the permanent- 
magnet holding force through discharging of the charge storage device. 

Background Art 

[0002] Electromagnetic operating mechanisms include a magnet yoke, an operating coi I, and 
an armature which is attracted by the magnet yoke when the operating coil is sufficiently 
energized. Electromagnetic operating mechanisms are used in electromagnetic switching 
devices (also referred to as contactors) for connecting and disconnecting an electric load to 
and from an electric power network by closing or opening the main contacts coupled to the 
armature. For reasons of safety, the regulations relevant to these switching devices require the 
load to be disconnected from the network when the control input of the electromagnetic 
operating mechanism is de-energized. 

[0003] Therefore, electromagnetic switching devices usually have electromagnetic operating 
mechanisms which hold the main contacts open using return springs when the operating coil 
is in the de-energized state. It is a disadvantage of such electromagnetic operating 
mechanisms that, in order to maintain the main contacts closed, a holding current through the 
solenoid coil, and thus a holding power, are required, as result of which waste heat is 
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generated during operation, requiring the electrical system to be thermally designed 
accordingly. 

[0004] German Publication DE 101 29 153 Al describes an electromagnetic valve in which 
a higher pull-in current is reduced to a lower holding current. The solenoid coil field or the 
solenoid coil current, which change when the valve is switched, are detected by sensor means 
in the form of a magnetic field sensitive switch or a current sensor for the coil current in order 
to change to the holding current. German Publication DE 299 09 901 describes a 
microprocessor control for an electromagnetic operating mechanism, where the holding 
current is minimized through pulse-width control. An electromagnetic switching device 
known from DE 39 08 3 19 Al has a permanent magnet in the magnet yoke in order to reduce 
the pull-in power and holding power required. German Patent DE 101 33 713 CI describes an 
electromagnetic operating mechanism which also has a permanent magnet in the magnet yoke 
and in which the required holding force is provided by said permanent magnet alone. When 
disconnecting the control voltage, a mechanical locking mechanism, which has been held by 
an auxiliary electromagnetic operating mechanism up to that point, is released, as a result of 
which a spring force counteracting the permanent magnet is released by the mechanical 
locking mechanism in order for the armature to drop out. However, the electromagnetic 
operating mechanisms mentioned above still require considerable holding power and auxiliary 
power, respectively. 

[0005] European Patent EP 0 721 650 Bl discloses a bistable magnetic actuator having 
permanent magnets disposed between a magnet yoke and a two-piece armature and including 
two individually energizable solenoid coils. A low reluctance flux path and a high reluctance 
flux path are formed in each of the bistable positions of the armature. Energization of the 
solenoid coil linked to the high reluctance flux path causes the armature to move from one 
stable position to the other, thus swapping over the low reluctance flux path and the high 
reluctance flux path. In an electromagnetically controlled valve operating mechanism 
according to EP 0 376 715 Bl, the holding state is brought about solely by a permanent 
magnet in the magnet yoke. On the other hand, the pulling in and dropping out of the 
armature is brought about by the suitably polarized brief discharging of a storage capacitor 
which has been charged in the preceding dropped-out state or holding state. German 
Publication DE 199 58 888 Al describes a so-called remanent actuator, whose armature 
assumes the OFF position, on the one hand, and the ON position, on the other hand, between 
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two permanent magnets disposed opposite each other and in oppositely poled relationship in 
the magnet yoke. The armature is moved from one position to the other and vice versa by 
briefly charging and discharging a capacitor, respectively. German Publication DE 201 13 
647 Ul describes an electromagnetic operating mechanism for an electromagnetic switching 
device, said electromagnetic operating mechanism also having a permanent magnet which is 
disposed in a double-circuit magnet yoke and which provides the holding force alone. A 
storage capacitor charged during the holding mode is discharged through the auxiliary circuit 
in order for the armature to drop out. In the electromagnetic operating mechanisms mentioned 
above, no measures are taken for the armature to reliably drop out when the control power 
fails. 

[0006] German Publication DE 101 46 1 10 Al discloses an electronic circuit arrangement 
having a microcontroller for switching an electromagnetic operating mechanism from the 
electromagnetic pull-in mode to the permanent-magnetic holding mode. When the control 
voltage is removed, the brief discharge current of a storage capacitor is used to demagnetize 
the magnetic circuit, and thus, to cause the armature to drop out. The document does not 
specify any means to prevent the electromagnetic operating mechanism from remaining in the 
holding mode in the event of a defect of the circuit arrangement. A microprocessor-controlled 
trip solenoid of a circuit breaker having permanent-magnetic holding force is known from DE 
199 54 037 Al. In order to test the holding force, the trip coil is loaded with brief current 
pulses at regular intervals. In case of a decrease in the holding force, tripping is performed 
prematurely for reasons of safety. 

Disclosure of the Invention 

[0007] It is therefore an object of the present invention for an electromagnetic operating 
mechanism having a permanent-magnetic holding mode to be reliably brought to the dropped- 
out state both after the control power is disconnected and after the occurrence of defects. 

[0008] Starting from a method and circuit arrangement of the type mentioned at the outset, 
the object is achieved according to the present invention, on the one hand, by the method 
described below and, on the other hand, by the circuit arrangement described below. 
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[0009] The method of the present invention is based on that the pulling in and dropping out 
of the armature is accomplished using separate coil means. The pull-in mode is accomplished 
using a main tripping coil in a generally known manner in accordance with method step C. In 
the normal case, dropping out is accomplished by discharging a previously charged charge 
storage device through a main tripping coil in accordance with method step E. In case the 
drop-out mode via the main tripping coil fails, dropping out can also be accomplished using a 
redundant auxiliary tripping coil. In order to provide high technical reliability, method step D 
provides for test steps to be performed on a regular basis by briefly energizing in each 
instance one of the tripping coils without causing the armature to be moved out of its holding 
position. If the testing shows that there is a failure in one of the tripping coils in terms of its 
drop-out capability, the respective other tripping coil causes the armature to positively drop 
out. After that, the control voltage is positively and permanently disconnected to prevent the 
faulty electromagnetic operating mechanism assembly from being re-energized. After the 
method is initialized by applying the control voltage and initializing the control circuit in 
accordance with method step A, and even before the pull-in mode is initialized, the tripping 
coils are tested accordingly and, in the event of a defect, the control voltage is subsequently 
permanently disconnected, in accordance with method step B. The method ensures, on the one 
hand, that the electromagnetic operating mechanism changes from the permanent-magnetic 
holding mode to the dropped-out state of its armature with certainty, both when the 
electromagnetic operating mechanism is intentionally de-energized and when the control 
voltage fails. On the other hand, the method ensures that the electromagnetic operating 
mechanism permanently assumes or remains in the dropped-out state when faults are 
detected, such as broken wires in or to the coil means, or defects in the control circuit. The 
holding energy consumed by the method is only the energy for re-charging the charge storage 
device and for supply to the electronic control circuit. 

[0010] In order to make the method less sensitive to changes in the control voltage and in 
the charging behavior of the charge storage device, the first testing of the tripping coils is 
advantageously carried out only after the charge storage device is sufficiently charged. 
Advantageously, the permanent disconnection of the control voltage in the event of a fault is 
accomplished by short-circuit tripping. 

[0011] On the one hand, the brief current flow through the auxiliary tripping coil can 
advantageously be detected as a brief voltage drop across a resistance. On the other hand, the 
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brief current flow through the main tripping coil can be detected as a brief voltage drop at the 
charge storage device. After such a voltage drop, the charge storage device must still have 
enough charge to perform the normal drop-out mode. In this connection, it is advantageous to 
check the voltage across the charge storage device during the voltage drop as to whether it is 
within a tolerance window in order for the control voltage to be permanently disconnected as 
a precautionary measure also in the event of a decrease in the charging capacity. 

[0012] One advantageous embodiment of the method checks whether an inductive voltage 
rise occurs at the closing coil during the testing of the tripping coils and initiates permanent 
disconnection if such voltage rise fails to occur. Failure of occurrence of such a voltage rise is 
generally attributable to permanent energization of the closing coil as a result of a defect. 

[0013] In another advantageous embodiment, a microcontroller decisively involved in the 
implementation of the method is constantly monitored, and the dropped-out state is 
maintained or assumed by energizing one of the two tripping coils in the event of a failure of 
the microcontroller, such as in the event of a program crash. 

[0014] The retaining force acting on the armature to ensure the dropped-out state is 
advantageously produced by at least one return spring and/or by at least one further 
permanent magnet. 

[0015] Moreover, starting from a circuit arrangement of the type mentioned at the outset, the 
object is achieved according to the present invention by the features of the independent device 
claim while advantageous refinements of the circuit arrangement will be apparent from the 
subordinate claims. 

[0016] The separate coil means in the form of a closing coil, a main tripping coil, and an 
auxiliary tripping coil, which provides redundancy for the main tripping coil, as well as 
switching elements coupled to these coils, in conjunction with a control circuit, allow the 
electromagnetic operating mechanism to be optimally designed with respect to its switching 
behavior and its energy consumption. Also provided are current- and voltage-monitoring 
means as sensors for current surges which are expected to occur regularly and alternately and 
which should occur when the disabling branches are tested by causing the corresponding 
disabling elements to be briefly closed without affecting the armature. If the control voltage 



{W:\20798\0204627us0\00870105.DOC! 



}5 



521.1048 



disappears, whether through intentional control or because of a defect in the supply feeder, the 
main disabling element is closed in order to return the armature to the dropped-out position by 
discharging the charge storage device through the main tripping coil. When a test fails, and 
possibly after the armature is returned to the dropped-out position by closing the main or 
auxiliary disabling element, a microcontroller connected to the detecting means and to the 
switching elements trips a permanent interrupting element for the control voltage in order to 
prevent the faulty operating mechanism assembly from being re-energized. 

[0017] The permanent interrupting element is simply designed as a short-circuit protective 
device having a downstream short-circuit switching element. As an alternative to the short- 
circuit protective device, it is possible to provide a conductor track with a weak point which is 
responsive to heat. An advantageous refinement is obtained when an active low-pass filter is 
placed between the closing coil and the short-circuit switching element. When the enabling 
branch is properly activated in a pulse-controlled manner, a charging capacitor is alternately 
charged and discharged without reaching a charge voltage which would trip the short-circuit 
switching element. Should the enabling element be permanently closed, i.e., permanently 
conducting, because of a defect, then the charging capacitor quickly reaches a charge voltage 
which trips the short-circuit switching element. 

[0018] Advantageously, the current-monitoring means are formed by a current-sensing 
resistor placed in series with the auxiliary tripping coil, and a downstream first amplifier 
circuit. 

[0019] Advantageously, the voltage-sensing means are formed by a high-pass filter 
connected to the charge storage device, and a downstream second amplifier circuit. During the 
testing of the main disabling branch, it is detected whether the voltage drop at the charge 
storage device caused by the current surge in the main tripping coil is within a 
predeterminable window. In a refinement of the circuit arrangement, a third amplifier circuit 
originating at the charging capacitor signals the microcontroller when a minimum charge 
voltage required for testing the disabling branches has been reached. It is also advantageous if 
the closing coil, which is activatable in a pulse-controlled manner, is connected to a free- 
wheeling circuit which can be deactivated outside the pull-in mode and to a fourth amplifier 
circuit which monitors the deactivation function of the free-wheeling circuit. The fourth 
amplifier circuit detects the occurrence of brief voltage rises which are induced in the closing 
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coil by the current surges in one of the tripping coils during the testing of the respective 
disabling branch. If the free-wheeling circuit cannot be deactivated because of a defect, a 
short-circuit develops for the expected voltage rises, so that no voltage rises are signaled by 
the fourth amplifier circuit to the microcontroller, whereupon the microcontroller trips the 
permanent interrupting element. This prevents that, in the drop-out mode, additional charge 
flows off the charge storage device because of the closing coil being short-circuited through 
the non-deactivated free-wheeling circuit, which could result in that the remaining charge 
would not be sufficient to properly return the armature. 

[0020] The retaining means provided to ensure the dropped-out state of the armature 
advantageously take the form of at least one return spring and/or at least one further 
permanent magnet. 

Brief Description of Drawings 

[0021] Further details and advantages of the present invention will become apparent from 
the exemplary embodiment described below with reference to the Figures, in which: 

[0022] Figure 1 is a flow chart illustrating the method of the present invention; 

[0023] Figure 2 is a block diagram of a circuit arrangement according to the present 
invention; 

[0024] Figure 3 shows a detail from Figure 2; 
[0025] Figure 4 shows a further detail from Figure 2; 

[0026] Figure 5 contains timing diagrams to illustrate the method and the circuit 
arrangement. 

Best Mode for Carrying Out the Invention 

[0027] The method described below with reference to Figure 1 is used to operate an 
electromagnetic operating mechanism which, as is generally known, includes a magnet yoke, 
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at least one permanent magnet connected thereto, an armature movable with respect to the 
magnet yoke, and electromagnetic coil means, and which is controlled by a control circuit 
with a microcontroller and using a control voltage supplied by a control voltage source. A 
retaining force ensuring the dropped-out state of the armature is produced by at least one 
return spring. Using the method, the permanent-magnet assisted electromagnetic pull-in mode 
against the retaining force, the exclusively permanent-magnetic holding mode, and the drop- 
out mode, which is provided electromagnetically against the permanent-magnetic holding 
force and assisted by the retaining force, are carried out in an energy-saving and reliable 
manner. 

[0028] The flow chart shown in Figure 1 starts with the initial state OFF of the method of 
the present invention, said initial state corresponding to the dropped-out state of the armature. 
First method step A checks whether control voltage Vi has risen to a value significantly 
different from zero. If this is the case, control voltage Vi causes the control circuit to be reset 
to a defined initial state and to be initialized. When control voltage Vi is applied, the charging 
of a charge storage device CI begins. 

[0029] In a subsequent method step B, the control circuit checks whether a main tripping 
coil L3, and an auxiliary tripping coil L4, which is redundant to said main tripping coil, are 
each able to move the armature from the holding position to the dropped-out position. Both 
tripping coils L3, L4 are electromagnetically coupled to the magnet yoke. To this end, in a 
first test step of method step B, auxiliary tripping coil L4 is energized for a period of 0.3 ms. 
If this test step runs successfully, a current supplied by the control voltage source flows 
briefly through auxiliary tripping coil L4. This current is detected as a voltage drop VR6 
across a current-sensing resistor R6 connected to auxiliary tripping coil L4 and causes the 
control circuit to check whether charge voltage VC1 across charge storage device CI has 
reached a predetermined sufficient level. If charge voltage VC1 is sufficiently high, the 
method goes to the second test step of method step B. Here, main tripping coil L3 is energized 
for a period of 0.3 ms. If this test step runs successfully, a current supplied by charge storage 
device CI flows briefly through main tripping coil L3, but leaves enough charge in charge 
storage device CI to ensure that the drop-out mode works properly. The brief current flow 
through main tripping coil L3 causes a brief voltage drop -AVC1 across charge storage device 
CI. If the magnitude of voltage drop -AVC1 is detected to be within a predetermined voltage 
window, the method goes to method step C. However, if, in the first test step, no voltage drop 
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is detected across current-sensing resistor R6, or if, in the second test step, no voltage drop is 
detected across charge storage device CI within the specified window, control voltage Vi is 
permanently disconnected by short-circuit tripping. Once control voltage Vi is permanently 
disconnected, the final state OUT OF SERVICE is reached. It is then impossible to energize 
the electromagnetic operating mechanism without previous repair. The failure of occurrence 
of voltage drop VR6 in the first test step means that it would also not be possible to return the 
armature to the dropped-out position using the redundant auxiliary tripping coil L4, if 
necessary, that is, when the returning of the armature using the main tripping coil fails. A 
failure of voltage drop -AVC1 across charge storage device CI to reach the predetermined 
voltage window in the second test step means that the returning of the attracted armature to 
the dropped-out position using main tripping coil L3 would fail. On the other hand, if voltage 
drop -AVC1 exceeds the voltage window, then this means that the capacitance of charge 
storage device CI has decreased to the point where the storable charge is no longer sufficient 
to return the attracted armature to the dropped-out position by discharging charge storage 
device CI through main tripping coil L3. 

[0030] After the control circuit detects that the test steps in method step B have completed 
successfully, the pull-in mode is performed in accordance with method step C in order for the 
electromagnetic operating mechanism to change to the ON state. To this end, a closing coil 
LI is turned on until the attracted position of the armature is reliably reached, after which said 
closing coil is deactivated. Now, the armature is held exclusively by permanent-magnet 
action. Closing coil LI and tripping coils L3, L4 are electromagnetically coupled to the 
magnet yoke. Closing coil LI is turned on in a pulse-width modulated manner (for example, 
in accordance with DE 299 09 901 Ul), and is connected to an activatable free-wheeling 
circuit FL. Free-wheeling circuit FL is activated as closing coil LI is turned on in a pulse- 
width modulated manner, and is deactivated together with said closing coil. Upon completion 
of method step C, the ON state is assumed. 

[0031] During the holding mode, which starts with the ON state, the following method step 
D tests, in two steps, the interrupting capability using tripping coils L3 and L4 without 
causing the armature to be moved out of its holding position. In the first and second test steps 
of method step D, analogously to method step B, auxiliary tripping coil L4 and main tripping 
coil L3 are turned on for 0.3 ms, respectively, and it is monitored whether a voltage drop VR6 
occurs at current-sensing resistor R6 connected to auxiliary tripping coil L4, or whether a 
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voltage drop -AVC1 falling within the predetermined voltage window occurs at the charge 
storage device CI connected to main tripping coil L3, respectively. If the two test steps run 
successfully, they are repeated with a certain periodicity. However, if, at any time during the 
first test steps, no voltage drop is detected across current-sensing resistor R6, then initially the 
armature is moved to the dropped-out position by turning on main tripping coil L3 through 
discharging of charge storage device CI, and, by way of the OFF state, which has been 
reached in the meantime, the final state OUT OF SERVICE is assumed by short-circuiting 
control voltage Vi. However, if, at any time during the second test steps, no voltage drop is 
detected across charge storage device CI within the specified window, then initially the 
armature is moved to the dropped-out position by turning on auxiliary tripping coil L4, which 
is supplied by the control voltage source, and, by way of the OFF state, which has been 
reached in the meantime, the final state OUT OF SERVICE is assumed by short-circuiting 
control voltage Vi. 

[0032] When control voltage Vi is removed, whether through intentional control or because 
of a defect in the feeder or in the generation of control voltage Vi, the drop-out mode is 
carried out in accordance with method step E. In the process, charging capacitor CI is 
discharged through turned-on main tripping coil L3, whereupon the armature moves to the 
dropped-out position and the electromagnetic operating mechanism changes to the OFF state, 
respectively. Now, the initial state OFF has been assumed again, from which the method may 
be restarted at method step A by reapplying control voltage Vi. 

[0033] During the second test steps in method steps B and D, it is also checked whether an 
induced voltage rise occurs at closing coil LI as a result of the brief current in main tripping 
coil L3 and because of the electromagnetic coupling between main tripping coil L3 and 
closing coil LI. If, in the second test step, the control circuit detects a significant voltage rise 
+AVL1, the method goes from method step B to method step C, or method step D is repeated 
periodically starting with the first test step, respectively. However, if during the second test 
step of method step B, no voltage rise +AVL1 is detected, the final state OUT OF SERVICE 
is assumed by short-circuiting control voltage Vi. On the other hand, if during one of the 
second test steps according to method step D, no voltage rise +AVL1 is detected at closing 
coil LI, then initially the armature is moved to the dropped-out position by turning on 
auxiliary tripping coil L4, which is supplied by the control voltage source, and, by way of the 
OFF state so reached, the final state OUT OF SERVICE is assumed by short-circuiting 
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control voltage Vi. If the voltage rise +AVL1 expected during the second test step fails to 
occur, then this means that free-wheeling circuit FL is not inactive because of a defect, and 
that it therefore represents a short-circuit for induced voltage rises. This short-circuit would 
also occur in the normal drop-out mode in accordance with method step E. Due to the 
electromagnetic coupling between closing coil LI and main tripping coil L3, if this short- 
circuit occurred during the discharging of charge storage device CI through main drop-out 
coil L3 in method step E, it would decrease the magnetic field strength in the magnet yoke 
significantly compared to the magnetic field strength occurring when free-wheeling circuit FL 
is inactive. When the magnetic field strength is reduced to such an extent, it is no longer 
guaranteed that the armature can be returned to the dropped-out position. 

[0034] With the completion of method step A, the method additionally checks the 
microcontroller using watchdog signals, which are continuously output by the microcontroller 
when it works properly. Watchdog signals in connection with microcontrollers are described, 
for example, in US Patent 5,214,560 A. If the watchdog signals fail to appear, which may 
occur in the event of a program crash or a program hang-up, charge storage device CI is 
discharged through main tripping coil L3 in accordance with method step E, after which the 
initial state OFF is assumed again. 

[0035] The present invention is not limited to the above-described specific embodiment of 
the method, but encompasses all equally acting embodiments within the scope of the method 
claims. For example, the method may be modified such that in method steps B and D, the first 
and second test steps are swapped with each other with respect to their succession in time. In 
a further possible modification, the evaluation of a voltage rise +AVL1 expected in closing 
coil LI is carried out during the first test step of method step D, that is, with respect to the 
inductive effect of the current briefly flowing through auxiliary tripping coil L4, or during 
both test steps. In yet another modification within the scope of the present invention, the 
retaining force to be exerted on the armature is additionally or alternatively produced by at 
least one further permanent magnet. Retaining springs for the retaining force are described, 
for example, in the above-mentioned German Patent DE 10133713C1, while further 
permanent magnets for the retaining force are disclosed in European Patent EP 0 721 650 Bl 
mentioned earlier. 
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[0036] The circuit arrangement schematically illustrated below with reference to Figure 2 is 
used to operate an electromagnetic operating mechanism which, as is generally known, 
includes a magnet yoke, at least one permanent magnet mounted thereto, an armature 
movably supported on the magnet yoke, and at least one return spring. The circuit 
arrangement includes electromagnetic coil means LI, L3 and L4 arranged around the magnet 
yoke, a control circuit which is supplied with a rectified control voltage Vi applied to its input 
and contains a microcontroller MC, and a capacitive charge storage device CI. When control 
voltage Vi is applied, the armature is attracted by the magnet yoke against the retaining force, 
assisted by permanent-magnet action, then held exclusively by permanent-magnet action 
while control voltage Vi remains applied, and when control voltage Vi is removed, the 
armature drops away from the yoke with the assistance of the retaining force and against the 
permanent-magnet holding force through discharging of charge storage device CI. Control 
voltage Vi is derived from a supply voltage Va via feed terminals SI and S2 of an input 
circuit El containing means for rectifying and filtering or suppressing interference. Supply 
voltage Va is to be applied externally to supply terminals AO und Al. Supply voltage Va can 
be obtained from a DC or an AC voltage source and is turned on to initiate the pull-in mode 
and turned off to initiate the drop-out mode. The low-potential feed terminal S2 is connected 
to the ground potential of the control circuit. High-potential feed terminal SI has connected 
thereto a control voltage controller BVi which initiates microcontroller MC when control 
voltage Vi has reached a sufficient level after application of supply voltage Va. 

[0037] An auxiliary disabling branch formed by the series connection of an auxiliary 
tripping coil L4, an electronic auxiliary disabling element T4 und current-monitoring means 
B14 is connected directly to feed terminals SI, S2. Originating from high-potential feed 
terminal SI, control voltage Vi is fed to the other circuit elements via a trippable permanent 
interrupting element DU. An enabling branch formed by the series connection of a closing 
coil LI and an electronic enabling element Tl is connected downstream of the permanent 
interrupting element. Also connected downstream of the permanent interrupting element is a 
series connection of a forward-biased decoupling diode D8 and a series-connected main 
disabling branch including a main tripping coil L3 and an electronic main disabling element 
T3. Charge storage device CI and voltage-sensing means BV3 are both connected in parallel 
with main disabling branch L3-T3. Enabling branch Ll-Tl and main disabling branch L3-T3, 
as well as charge storage device CI and voltage-sensing means BV3 are supplied with a 
disconnectable control voltage Vi', which is equal to control voltage Vi when permanent 
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interrupting element DU is conducting, and which is zero when the permanent interrupting 
element is in the tripped state. Inputs of microcontroller MC are connected to current-sensing 
means B14 and voltage-sensing means BV3. Outputs of microcontroller MC are connected to 
switching elements Tl, T3 and T4 and to permanent interrupting element DU. Decoupling 
diode D8 prevents charge from flowing off the charge storage device CI through enabling 
branch Ll-Tl and through auxiliary disabling branch L4-T4-BI4. 

[0038] Microcontroller MC is programmed such that it is initialized by a reset signal 
occurring after some delay at the output of control voltage controller BVi upon application of 
control voltage Vi, that it causes auxiliary disabling element T4, and subsequently main 
disabling element T3, to turn on, i.e., to become conducting, for the purpose of testing, that it 
activates enabling element Tl in a pulse-controlled manner in order to move the armature to 
the attracted position, that it subsequently deactivates enabling element Tl, and that when 
control voltage Vi is removed, it closes main disabling element T4 in order to move the 
armature to the dropped-out position, in which process the electromagnetic restoring force is 
obtained from the charge of charge storage device CI flowing off through main tripping coil 
L3. The closing of disabling elements T3 and T4 for the purpose of testing occurs only during 
a short period of, for example, 0.3 ms, so that it will not affect the armature. If, while main 
disabling element T3 is turned on for testing purposes, microcontroller MC receives no output 
signal from voltage-sensing means BV3, it closes auxiliary disabling element T4. The current 
which is then supplied from feed terminals SI, S2 and flows through auxiliary tripping coil 
L4 returns the armature from the holding position to the dropped-out position, unless the 
armature was still in the dropped-out position. After that, microcontroller MC trips permanent 
interrupting element DU, so that the subsequent circuit elements are disconnected from 
control voltage Vi. However, if while auxiliary disabling element T4 is turned on for testing 
purposes, microcontroller MC receives no output signal from current-sensing means B14, it 
closes main disabling element T3. The current which is then supplied from charge storage 
device CI and flows through main tripping coil L3 returns the armature from the holding 
position to the dropped-out position, unless the armature was still in the dropped-out position. 
In this case, too, microcontroller MC subsequently trips permanent interrupting element DU, 
so that the subsequent circuit elements are disconnected from control voltage Vi. 

[0039] Closing coil LI and enabling element Tl have connected thereto an active low-pass 
filter AT whose output is connected to permanent interrupting element DU. When enabling 
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element Tl is turned on in a pulse-controller manner, active low -pass filter AT alternately 
charges and discharges without reaching a predetermined tripping voltage. If enabling 
element Tl can no longer be blocked because of a defect, then active low-pass filter AT 
reaches the tripping voltage, thus tripping permanent interrupting element DU in order to 
disconnect the subsequent circuit elements from control voltage Vi. 

[0040] To protect enabling element Tl from overvoltages and to quickly remove the 
magnetic energy, a free-wheeling circuit FL is placed in parallel with closing coil LI in a 
generally known manner. In the drop-out mode, free-wheeling circuit FL would represent a 
significant additional load for charging capacitor CI because of the electromagnetic coupling 
through mutual inductance between closing coil LI and main tripping coil L3. Due to this 
additional load, the charge stored on charge storage device CI would no longer be sufficient 
to reliably return the armature to the dropped-out position. Therefore, free-wheeling circuit 
FL is designed as an activatable free-wheeling circuit, which is activated and deactivated by 
microcontroller MC together with enabling element Tl. This means that free-wheeling circuit 
FL, which is deactivated outside the pull-in mode, is unable to place a load on charging 
capacitor CI in the drop-out mode. During the testing of main disabling branch L3-T3, with 
free-wheeling circuit FL in the deactivated state, the brief current flow through main tripping 
coil L3 induces a voltage rise +AVL1, which is signaled to the microcontroller MC via further 
voltage-sensing means BV1. If, while main disabling element T3 is turned on for testing 
purposes, voltage rise +AVL1 fails to occur, auxiliary disabling element T4 is turned on in 
order for the armature to assume the dropped-out position, and then permanent interrupting 
element DU is tripped. 

[0041] Furthermore, microcontroller MC controls a watchdog circuit WC which, in the 
event of a failure of microcontroller MC, causes the armature to be moved from the attracted 
position to the dropped-out position by closing main disabling element T3. 

[0042] Figure 3 and Figure 4 show, by way of example, details of the circuit arrangement of 
Figure 2. Input circuit El is formed by an interference-suppression capacitor C10 and a 
voltage-limiting resistor R35 on the input side, and a full-wave rectifier including rectifier 
diodes Dl 1 through D14 on the output side. The control voltage Vi present at the output of 
full-wave rectifier Dl 1-D14, i.e. at feed terminals SI, S2, passes through permanent 
interrupting element DU as a disconnectable control voltage Vi'. Permanent interrupting 
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element DU includes a short-circuit protective device Fl inserted in control voltage line Wl, 
and a subsequent semiconductor-type short-circuit switching element T6 placed between 
control voltage line Wl and the ground potential. Microcontroller MC provides at an output 
LaO a short-circuit signal CB which is delivered via an integrated amplifier IV32 and a first 
OR diode D6 to the base electrode of short-circuit switching element T6. 

[0043] Control voltage Vi is supplied via control voltage controller BVi to a terminal A3 of 
microcontroller MC and, using usual means and in conjunction with a terminal A2 of 
microcontroller MC, determines the service-readiness of microcontroller MC with respect to 
the control voltage Vi building up and the pulse-width during pulse-width controlled 
activation of enabling element Tl. 

[0044] Disconnectable control voltage Vi' is supplied to charge storage device CI via a 
charging resistor R14 and decoupling diode D8. Disconnectable control voltage Vi' and 
charge voltage VC1 across charge storage device CI are separately supplied to a switched- 
mode power supply unit ST via decoupling diodes D21 and D20. Switched-mode power 
supply unit ST provides the DC supply voltage of +13.6 V required for the voltage supply to 
the control circuit, as well as the supply voltage of +5 V derived therefrom. In the pull-in 
mode and in the holding mode, switched-mode power supply unit ST, and thus the control 
circuit, are supplied with disconnectable control voltage Vi'. However, in the drop-out mode, 
switched-mode power supply unit ST, and thus the control circuit, are supplied with charge 
voltage VC1. The +5 V output of switched-mode power supply unit ST is also connected to a 
reset circuit, which is formed by an integrated amplifier IV7, an integrating capacitor C28 on 
the output side, and a feedback resistor R65 in a usual manner. When disconnectable control 
voltage Vi' builds up after application of supply voltage Va, amplifier IV7 sends a reset signal 
RES to the RESET input of microcontroller MC, whereupon microcontroller MC is reset to a 
defined initial state. 

[0045] The auxiliary disabling branch is formed by auxiliary tripping coil L4, 
semiconductor-type auxiliary disabling element T4, and the current-monitoring resistor R6 
placed in the emitter circuit of said current-monitoring resistor R6. Microcontroller MC 
outputs, at an output La2, a testing auxiliary disable signal ABr which returns the armature, if 
required. Auxiliary disable signal ABr is fed to the base electrode of auxiliary disabling 
element T4 via an integrated amplifier IV31 and a series resistor R7. Auxiliary disable signal 
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ABr has a duration of 0.3 ms for the testing of auxiliary disabling branch L4-T4-R6, 
whereupon a brief current should flow through current-sensing resistor R6. Voltage drop 
VR6, which then develops across current-sensing resistor R6, is fed as an auxiliary 
confirmation signal SD via a first amplifier circuit IV21 to an input B4 of microcontroller 
MC. Current-sensing resistor R6 and first amplifier circuit IV21 are equivalent to current- 
sensing means B14 of Figure 2. Moreover, the output of amplifier IV31 is connected to the 
base electrode of short-circuit switching element T6 via a delay element and a second OR 
diode D7, said delay element including a delay resistor R9 and a delay capacitor C6. Via this 
connection, permanent interrupting element DU is tripped too in the event that main disabling 
branch L3-T3 fails after the armature-returning closing of auxiliary disabling element T4. 

[0046] The main disabling branch is formed by main tripping coil L3, semiconductor-type 
main disabling element T3 and a first suppressor diode D10 as a free-wheeling circuit for 
main tripping coil L3. Microcontroller MC outputs, at an output Lai, a testing main disable 
signal AB which returns the armature, if required. Main disable signal AB is fed, via an 
integrated amplifier IV42, a fourth OR diode D44 and a series resistor R18, to the base 
electrode of main disabling element T3, said base electrode having connected thereto divider 
resistors R66, R67. Main disable signal AB has a duration of 0.3 ms for the testing of main 
disabling branch L3-T3-D10, whereupon a measurable voltage drop -AVC1 should occur at 
charge storage device CI. Voltage drop -AVC1 is fed as a main confirmation signal SB via a 
passive high-pass filter and a second amplifier circuit IV12 to a terminal A4 of 
microcontroller MC, said passive high-pass filter including a differentiating capacitor C2, a 
bleed resistor R21, and a limiter diode Dl. Microcontroller MC monitors whether voltage 
drop -AVC1 is within a predetermined window. Too low a voltage drop -AVC1 means that an 
absence or too low a coil current IL3 in main drop-out coil L3 will not cause the armature to 
be returned during the drop-out mode. On the other hand, too high a voltage drop -AVC1 
means that the capacitance of charge storage device CI is no longer sufficient to provide 
enough current flow through main drop-out coil L3 during the drop-out mode. Capacitor CI 
further has connected thereto a third amplifier circuit IV 1 1 via a voltage divider formed by 
divider resistors R19, R20, said third amplifier circuit IV1 1 providing at its output a voltage 
control signal SA which is proportional to charge voltage VC1 and which is delivered to a 
terminal A5 of microcontroller MC. Based on voltage control signal SA, microcontroller MC 
checks whether, after application of control voltage Vi, charge storage device MC has been 
charged to a level sufficient to ensure the drop-out mode. Voltage-sensing means BV1 of 
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Figure 2 are formed by high-pass filter C2-R21, voltage divider R19-R20 and second and 
third amplifier circuits IV 12 and IV 1 1. 

[0047] Microcontroller MC periodically outputs watchdog signals WDG at an output La3, 
said watchdog signals being monitored by a watchdog circuit WC. Watchdog circuit WC is 
known per se from Publication WO 03 077 396 Al and includes a high-pass filter, a charging 
capacitor capable of being discharged in the rhythm of watchdog signals WDG, as well as a 
voltage comparator. The output of watchdog circuit WC is connected via a fifth OR diode to 
series resistor R18. In the event that microcontroller MC is faulty, watchdog signals WDG fail 
to appear, whereupon watchdog circuit WC initiates the drop-out mode by closing main 
disabling element T3. 

[0048] The enabling branch is formed by closing coil LI, semiconductor-type enabling 
element Tl, activatable free-wheeling circuit FL and a suppressor diode D9, which serves for 
additional overvoltage protection. Microcontroller MC outputs a pulse-width modulated 
enable signal AN via an output La4 and a resistor circuit R45 through R48 Enable signal AN 
is fed to the base electrode of enabling element Tl via an integrated amplifier IV41 and a 
series resistor R17. Activatable free-wheeling circuit FL includes a high-pass filter, which is 
formed by a differentiating capacitor C4 and a bleed resistor R13 and is connected 
downstream of the output of amplifier IV41, the free-wheeling circuit further including a 
charging circuit which is formed by a series connection of a rectifier diode D4, a charging 
resistor R15, a charging capacitor C3, a limiter diode D3 and a discharge resistor Rl and 
starts at high-pass filter C4-R13, the free-wheeling circuit further including a series circuit 
which is connected in parallel with closing coil LI and which is formed by a free-wheeling 
diode D2 and a semiconductor-type activation switching element T2 whose gate electrode is 
connected to charging capacitor C3. Upon pulse-controlled activation of enabling element Tl, 
charging capacitor C3 starts to be "pumped up" in the rhythm of the pulses of enable signal 
AN present at amplifier IV41. After a few pulses of enable signal AN, the voltage across 
charging capacitor C3 has increased to the point where activation switching element T2 
closes, actively connecting free-wheeling diode D2 to closing coil LI. Now, free-wheeling 
circuit FL is in the active state. When enable signal AN ceases, charging capacitor C3 is 
discharged through discharge resistor R16, in which process free-wheeling diode D2 is 
disconnected from closing coil LI by the blocking of activation switching element T2. Thus, 
free-wheeling circuit FL has returned to the inactive state. 
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[0049] The junction point between closing coil LI, enabling element Tl and activatable 
free-wheeling circuit FL is connected via a voltage divider R24-R25 to a fourth amplifier 
circuit IV91. Voltage drop +AVL1 induced in closing coil LI during the testing of main 
disabling branch L3-T3-D10 while free-wheeling circuit FL is deactivated is fed as a blocking 
control signal SC via a fourth amplifier circuit IV91 to an input A6 of microcontroller MC. 
Voltage divider R24-R25 and fourth amplifier circuit IV91 are equivalent to the further 
voltage-sensing means BV1 of Figure 2. 

[0050] The junction point between closing coil LI, enabling element Tl and free-wheeling 
circuit FL is connected via a further voltage divider Rl 1-R12 to the base electrode of a 
switching transistor T5 whose collector electrode is connected to a charging resistor R10 and 
a further charging capacitor C5 Charging capacitor C5 is connected via a third OR diode D5 
to the base electrode of short-circuit switching element T6. Outside the pull-in mode, enabling 
element Tl is blocked, as a result of which charging capacitor C5 is discharged through the 
collector-emitter path of switching transistor T5, which is closed by closing coil LI and 
voltage divider Rl 1-R12. In the pull-in mode, the voltage pulses occurring across enabling 
element Tl in the pulse rhythm of enable signal AN cause switching transistor T5 to be 
alternately closed and blocked, so that no significant voltage can develop across the 
alternately charged and discharged charging capacitor C5. However, in the event that enabling 
transistor Tl is permanently closed due to a defect (generally resulting from breakdown), 
switching transistor T5 is permanently blocked. Then, as the charging of charging capacitor 
C5 through charging resistor R10 proceeds, short-circuit switching element T5 is closed, after 
which the short-circuit protective device Fl trips, thus permanently disconnecting 
disconnectable control voltage Vi'. The electromagnetic operating mechanism is prevented 
from being energized. Voltage divider Rl 1-R12, switching transistor T5, charging resistor 
R10 and charging capacitor C5 together are equivalent to active low-pass filter AT of Figure 
2. A trip signal SE is carried from the junction of first through third OR diodes D5 through 
D7 and a junction resistor R8 to an input B3 of microcontroller MC. Upon receipt of a trip 
signal SE, microcontroller MC outputs a main disable signal AB as a precautionary measure 
so as to return the armature, which may already have been attracted. 

[0051] In addition to the above-described monitoring of enabling element Tl for proper 
functioning, the circuit arrangement also includes further self-monitoring functions, which 
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will be described below, said further self-monitoring functions ensuring that the circuit 
arrangement and the electromagnetic operating mechanism change to a defined safety state. 

[0052] In the event of broken wires to or in main tripping coil L3, or in case main disabling 
element T3 is permanently blocked, no main confirmation signal SB is output by second 
amplifier circuit IV 12 after main disable signal AB is output for the purpose of testing 
because of the failure of a voltage drop -AVC1 to occur at charge storage device CI. Then, 
microcontroller MC initially outputs an auxiliary disable signal ABr to return the armature to 
the dropped-out position, and then a short-circuit signal CB to permanently disconnect 
disconnectable control voltage Vi'. After that, the electromagnetic operating mechanism is no 
longer operable. 

[0053] In case the capacitance of charge storage device CI should have decreased to a level 
which is no longer tolerable, or in the event of a breakdown of suppressor diode D10 
connected to main tripping coil L3, a main confirmation signal SB exceeding the 
predetermined window is output by second amplifier circuit IV 12 after main disable signal 
AB is output for the purpose of testing because of too high a voltage drop -AVC1 at charge 
storage device CI. Then, microcontroller MC initially outputs an auxiliary disable signal ABr 
to return the armature to the dropped-out position, and then a short-circuit signal CB to 
permanently disconnect disconnectable control voltage Vi'. After that, the electromagnetic 
operating mechanism is no longer operable. 

[0054] If the activatable free-wheeling circuit is always in the active state, no blocking 
control signal SC is output by fourth amplifier circuit IV91 after main disable signal AB is 
output for the purpose of testing because of a hardly detectable voltage rise +AVL1 at closing 
coil LI. Then, microcontroller MC initially outputs an auxiliary disable signal ABr to return 
the armature to the dropped-out position, and then a short-circuit signal CB to permanently 
disconnect disconnectable control voltage Vi'. After that, the electromagnetic operating 
mechanism is no longer operable. 

[0055] In the event that main disabling element T3 breaks down, i.e., if it is permanently 
conducting, no voltage control signal SA is output by third amplifier circuit IV 1 1 after control 
signal Vi is applied because a required charge voltage VC1 across charge storage device CI 
fails to be reached. Then, microcontroller MC outputs a short-circuit signal CB to 
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permanently disconnect disconnectable control voltage Vi*. After that, the electromagnetic 
operating mechanism is no longer operable. 

[0056] In the event of broken wires to or in auxiliary tripping coil L4, or in case auxiliary 
disabling element T4 is permanently blocked, no auxiliary confirmation signal SD is output 
by first amplifier circuit IV21 after auxiliary disable signal ABr is output for the purpose of 
testing because of the failure of a voltage drop VR6 to occur at current-measuring resistor R6. 
Then, microcontroller MC initially outputs a main disable signal AB to return the armature to 
the dropped-out position, and then a short-circuit signal CB to permanently disconnect 
disconnectable control voltage Vi'. After that, the electromagnetic operating mechanism is no 
longer operable. 

[0057] In the event that auxiliary disabling element T4 breaks down, i.e., if it is permanently 
conducting, no voltage control signal SA is output by third amplifier circuit IV1 1 after control 
signal Vi is applied because a required charge voltage VC1 across charge storage device CI 
fails to be reached. Then, microcontroller MC outputs a short-circuit signal CB to 
permanently disconnect disconnectable control voltage Vi'. After that, the electromagnetic 
operating mechanism is no longer operable. 

[0058] Upon breakdown of short-circuit switching element T6, two alternative cases may 
arise when control voltage Vi collapses. In the first case, main disable signal AB is output, 
causing the armature to return to the dropped-out position before short-circuit protective 
device Fl subsequently trips. In the second case, short-circuit protective device Fl trips after 
the voltage drop detected via fourth amplifier circuit IV91 has caused microcontroller MC to 
output an auxiliary disable signal ABr to return the armature. Here too, the electromagnetic 
operating mechanism is no longer operable in either of the two cases. 

[0059] In the event of a failure of the +5 V DC supply voltage, watchdog circuit WC causes 
the armature to return to the dropped-out position when watchdog signals WDG fail to 
appear. In the event of a failure of the +13.6 V DC supply voltage, watchdog circuit WC and 
integrated amplifier IV42 become inactive. By closing main disabling element T3 via the 
voltage divider R66-R67 connected to its base electrode, the armature is returned to the 
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dropped-out position. The electromagnetic operating mechanism is no longer operable until 
the DC supply voltages are restored. 

[0060] The timing diagrams in Figure 5 demonstrate both the sequence of the method 
according to the present and the operation of the inventive circuit arrangement without any of 
the failure phenomena described above. Upon application of control voltage Vi at instant tA, 
charge voltage VC1 is developed by charging charge storage device CI in accordance with 
method step A, in which process the level of charge voltage VC1 is monitored using voltage 
control signal SA. Method step B starts at instant tBl with the output of an auxiliary disable 
signal ABr of 0.3 ms for the testing of the auxiliary disabling circuit, whereupon the brief 
current IL4 through auxiliary tripping coil L4 generates an auxiliary confirmation signal SD. 
At a subsequent instant tB2, a main disable signal AB is output to test the main disabling 
branch, whereupon the brief voltage drop -AVC1 of charge voltage VC1 generates a main 
confirmation signal SB. Brief auxiliary interrupting current IL4 and brief main interrupting 
current IL3 induce voltages in closing coil LI which, in the case of the voltage rise +AVL1 
induced by brief main interrupting current IL3, are output in the form of blocking control 
signal SC. Method step C starts at instant tCl and ends at instant tC2 with pulse-width 
controlled enable signal AN. With the delayed decay of a current IL1 through closing coil LI 
of considerable duration, the pull-in mode ends and the holding mode begins. 

[0061] In accordance with method step D, the auxiliary disabling branch and the main 
disabling branch are tested periodically during the holding mode by outputting auxiliary 
disable signals ABr and main disable signals AB of a period of 0.3 ms each at instants tDl 
and tD2, respectively. Here too, the auxiliary confirmation signals SD and main confirmation 
signals SB are output as a result of brief coil currents IL4 and IL3, respectively, and the 
voltage rises +AVL1 are impressed on blocking control signal SC as a result of brief coil 
current IL3. The removal of control voltage Vi at instant tEl terminates the holding mode and 
starts the drop-out mode in accordance with method step E. The output of a main disable 
signal AB of considerable duration causes a current IL3 supplied by charge storage device CI 
to flow through main tripping coil L3, as a result of which the armature is retuned to the 
dropped-out position. In this process, charge voltage VC1 falls to nearly zero. When main 
disable signal AB ceases at instant tE2, the drop-out mode ends, the electromagnetic 
operating mechanism has thus entered its de-energized state and is ready again to change to 
the pull-in mode when control voltage Vi is applied again. 
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[0062] It should be added that the voltage rises impressed on blocking control signal SC are 
caused by both the inductive coupling between auxiliary tripping coil L4 and closing coil LI 
and the inductive coupling between main closing coil L3 and closing coil LI . 

[0063] Here too, the present invention can be modified, without departing from its scope, 
such that the retaining force to be exerted on the armature is additionally or alternatively 
produced by at least one further permanent magnet. Retaining springs for the retaining force 
are described, for example, in the above-mentioned German Patent DE 101 33 713 CI, while 
further permanent magnets for the retaining force are disclosed, for example, in European 
Patent EP 0 721 650 Bl mentioned earlier. 
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